Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: 48YD1o0om3C6G3/oSjddVUxSg2498XeK9wde8raGtoQ=
Subject key identifier: 2A:CB:47:07:8C:9A:E6:9A:9F:80:24:67:7F:71:EC:F6:6A:82:9A:F8
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 01A1AA14F5340CEC23B843A345CF7D6039A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 1AE0
Signing time: Thu 05 Nov 2026 05:01:02 +0000
Manifest this update: Thu 05 Nov 2026 05:01:02 +0000
Manifest next update: Fri 06 Nov 2026 05:01:02 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: tLQwixNZPvIhRlChw0RgFOY1lmtV4bph5PwRFi+xQH0=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:14:f5:34:0c:ec:23:b8:43:a3:45:cf:7d:60:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Nov 5 05:01:02 2026 GMT
Not After : Nov 6 05:01:02 2026 GMT
Subject: CN=2acb47078c9ae69a9f8024677f71ecf66a829af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:49:03:24:2b:8c:18:79:e0:26:b4:cb:2c:
69:55:34:41:1a:ee:3b:ec:9a:a5:4f:07:ef:51:43:
68:ba:df:9e:68:31:74:34:dc:a8:22:f7:b6:38:72:
3b:aa:98:98:a0:af:74:88:d7:af:28:d8:94:32:77:
16:c9:6b:54:3f:0f:84:b6:8d:4c:14:6f:fb:e1:b0:
82:ac:78:d3:af:04:3a:c7:43:6e:f9:02:a4:2b:6d:
90:37:23:d5:9e:50:b6:fe:a2:57:df:c5:d1:cd:a9:
f8:ab:d1:23:14:eb:77:9c:87:bc:4d:36:bd:ad:d2:
6a:dc:9a:90:dc:fb:cb:0b:52:36:7f:3f:26:7c:95:
43:a7:1c:af:79:2a:f0:bb:26:68:c3:cc:73:4f:62:
bf:9d:f7:b7:19:15:ae:8b:b7:d9:82:6c:8f:70:70:
ef:64:0e:64:1c:be:21:96:17:e0:98:73:68:d1:16:
8a:59:67:24:46:6f:65:0c:6f:b2:0b:c1:43:19:fa:
ac:9f:8e:d0:df:52:4f:e2:5a:cd:93:9e:0f:65:74:
da:e0:ef:bd:ee:fe:18:bf:29:8b:cf:db:ee:7c:73:
48:ce:4f:d6:ad:8f:81:c7:6f:61:81:b9:79:ca:a9:
98:55:e5:e0:c7:f3:2b:d9:40:4f:87:33:6b:23:aa:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:47:07:8C:9A:E6:9A:9F:80:24:67:7F:71:EC:F6:6A:82:9A:F8
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0f:04:d9:38:d3:c1:0b:a0:75:85:d0:c8:7b:cb:c9:72:be:
d3:e7:d6:90:6c:f6:d6:a0:01:60:ad:87:22:7d:2e:50:e6:bf:
73:32:58:7b:c9:ad:97:d4:3a:c2:18:92:ca:14:c4:90:db:2a:
77:60:aa:5c:f2:e7:9e:e2:61:fb:e0:c9:d0:04:10:5f:ad:eb:
ab:1c:71:73:21:a7:ef:27:3b:6d:bf:0b:9e:69:f9:93:c5:4e:
4b:1d:36:5c:8e:cb:9f:76:47:55:0a:10:b0:11:45:f8:75:84:
a4:d1:a5:89:d7:2a:f6:58:96:c8:7e:45:90:cf:48:45:85:37:
49:f2:fc:0a:f1:9e:5f:ed:f1:0b:19:55:38:24:c3:42:f5:ed:
8a:9a:20:57:64:0e:40:ed:71:52:04:f3:31:2c:7f:94:fe:cb:
ff:c0:8e:4a:e0:db:9e:11:68:18:bd:98:d9:db:48:d5:3e:30:
f9:10:96:f0:c0:79:94:2c:53:3f:11:06:cd:57:b6:2d:9e:f3:
c4:27:a2:8c:37:61:60:b6:83:f9:91:46:87:9e:dc:71:83:5b:
ca:1c:aa:fd:ff:7e:b4:38:b0:78:a5:c1:5f:4a:14:6e:7e:df:
46:82:f0:46:8a:16:23:64:ba:ce:11:a6:87:7a:16:f0:ff:eb:
60:ad:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:13:18 2026 by rpki-client